Topic starter
10/06/2026 10:46 pm
TL;DR: Australia’s crypto market is projected to reach 11.38 million users by 2025, while regulatory uncertainty and tighter AUSTRAC scrutiny are pushing VASPs toward stronger AML/CFT controls, structured enrolment, and better records, according to SumSub. For IAM and compliance teams, the lesson is that identity proofing, monitoring, and evidence retention now sit inside the same governance problem.
Editorial analysis by NHI Mgmt Group, based on content published by SumSub: “A Practical Guide to AML/CFT Compliance for VASPs under AUSTRAC”.
Key questions
Q: How should crypto businesses implement AML/CFT controls under AUSTRAC expectations?
A: Start by tying onboarding, monitoring, reporting, and retention into one governed workflow.
Q: Why do weak identity checks create AML/CFT risk for VASPs?
A: Weak checks make downstream monitoring less reliable because the organisation cannot confidently connect activity to a verified customer.
Q: What breaks when record retention is too weak for crypto compliance?
A: Investigations lose the context needed to explain why a transaction was escalated, which identities were involved, and what action was taken.
Practitioner guidance
- Map the AUSTRAC compliance lifecycle Document how enrolment, customer due diligence, suspicious transaction reporting, and record retention connect across the VASP operating model.
- Harden identity proofing at onboarding Require identity checks and risk scoring that produce durable evidence, not just a pass or fail outcome at account creation.
- Align monitoring with case evidence Make sure alerts, investigations, and retention rules preserve enough context to explain why activity was flagged and how it was handled.
Bottom line: Australia’s crypto compliance pressure is rising because AUSTRAC expectations now reach into enrolment, due diligence, suspicious reporting, and records.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
This topic was modified 1 day ago by NHI Mgmt Group
12/06/2026 4:29 am
Crypto AML/CFT has become an identity governance problem, not just a financial crime problem. The article shows that AUSTRAC expectations push VASPs to manage enrolment, monitoring, reporting, and retention as one connected control surface. Once customer identity evidence and transaction evidence are inseparable, the programme needs governance across the full lifecycle, not isolated point controls.
A question worth separating out:
Q: How should teams evaluate verification partners for regulated crypto onboarding?
A: Look for partners that preserve evidence quality, support risk-based identity proofing, and fit the broader AML/CFT workflow. The decision should be driven by auditability and control consistency, not only by onboarding speed or user experience.
👉 Read our full editorial: Australia’s crypto AML/CFT guide shows compliance pressure rising
This post was modified 1 day ago by NHI Mgmt Group